1. Home
  2. Privacy Policy
Official Data Protection Document

Privacy Policy BigBossJudi — Our Commitment to Protecting Your Personal Data

Your privacy is more than a legal obligation to BigBossJudi — it is a trust we take seriously every single day. This document clearly explains what data we collect, how it is used, who can access it, and your rights as a Malaysian member.

Last Updated: 1 January 2026  |  Compliant with Malaysia PDPA 2010
Register Account Terms & Conditions
Protected Under PDPA 2010

All BigBossJudi member data is fully protected under Malaysia's Personal Data Protection Act 2010 — the country's highest standard for data protection legislation.

SSL 256-bit Encryption
No Data Sales
Periodic Security Audits
Our Privacy Commitment

BigBossJudi's 6 Data Protection Promises to You

Before reading the full policy, here are the six core commitments that guide how BigBossJudi handles the personal data of every Malaysian member.

Bank-Grade Encryption

All communications between your device and BigBossJudi's servers are protected with 256-bit SSL encryption — the same technology used by Maybank and CIMB. Your data cannot be intercepted by any third party.

No Data Sales

BigBossJudi has never sold, rented, or traded member personal data to any third party for commercial purposes — and never will. Your data is not our product. Your trust is.

Malaysian PDPA Compliance

All of BigBossJudi's data collection, processing, and storage practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary data protection legislation.

Restricted & Controlled Access

Only BigBossJudi staff who require access to specific data in order to perform their duties are permitted to do so. All access is automatically logged and monitored to prevent internal misuse.

Full Member Data Control Rights

As a BigBossJudi member, you have the right to access, correct, delete, or request a copy of your personal data at any time. Our support team is ready to assist you through this process.

Independent Security Audit

BigBossJudi's data security systems undergo regular independent audits by qualified third-party cybersecurity firms, ensuring our data protection standards remain current and effective.

Types of Data Collected

What Personal Data Does BigBossJudi Collect?

We only collect data that is genuinely necessary to provide a secure, personalised, and high-quality service to every BigBossJudi member.

Identity Data
Username, full name (where required for verification), MyKad or passport number during the KYC process, date of birth for age verification.
Contact Data
An active Malaysian phone number (required for registration and OTP verification) and an email address (optional, for notification communications).
Financial Data
Deposit and withdrawal records in MYR, e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX accounts used for transactions.
Game Activity Data
Game history, bets placed, wins and losses, play duration, and game preferences (baccarat, live casino, sports, e-sports) for the purpose of personalising your experience.
Device & Technical Data
IP address, device type (Android/iOS), web browser type, operating system, and session log data. Used for account security and detecting suspicious access attempts.
Support Communication Data
Live chat conversation records, support emails, and any feedback you submit to the BigBossJudi team — retained to ensure service quality and resolve disputes.
Contents
1
Introduction & Scope
2
How We Collect Your Data
3
Purpose of Data Use
4
Disclosure to Third Parties
5
Data Security
6
Use of Cookies
7
Data Retention Period
8
Your Rights
9
Children's Data
10
Privacy Policy Updates
11
How to Contact Us
Privacy Concerns?

Contact BigBossJudi's Privacy Officer via email or live chat for any data-related enquiries.

support@bigbossjudi.world
In-platform Live Chat 24/7
By using the BigBossJudi platform, you consent to the data collection and usage practices described in this Privacy Policy.
1

Introduction & Scope of Privacy Policy

This Privacy Policy explains how the BigBossJudi platform collects, uses, stores, protects, and in certain circumstances discloses personal information provided by or collected from members and visitors to our platform at bigbossjudi.world.

BigBossJudi is fully committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) — the legislation governing the collection, processing, storage, use, and disclosure of personal data in Malaysia. We respect the privacy of every individual who interacts with our platform and are dedicated to ensuring that your personal data remains secure and is used only for lawful, clearly defined purposes.

This Privacy Policy applies to all information collected through:

  • The BigBossJudi website at bigbossjudi.world
  • BigBossJudi mobile app for Android and iOS
  • All communications between you and BigBossJudi's customer support team
  • Any other online service operated under the BigBossJudi brand

This Privacy Policy should be read together with BigBossJudi Terms & Conditions. Both documents together form the complete agreement between you and BigBossJudi regarding use of the platform and the handling of your personal data.

2

How We Collect Your Personal Data

BigBossJudi collects personal data through several distinct channels, all within the context of providing a safe, high-quality online gambling service to Malaysian players:

Direct Collection: Data you provide directly to BigBossJudi during:

  • New account registration — username, Malaysian phone number, and password.
  • Identity verification (KYC) — full name, MyKad or passport number, and date of birth.
  • Processing deposits and withdrawals — e-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX accounts via Maybank2u, CIMB Clicks, and other Malaysian banks.
  • Communications with BigBossJudi's customer support team via live chat or email.

Automatic Collection: Data collected automatically while you use the BigBossJudi platform, including IP address, device type, operating system, web browser used, activity log data, and game and transaction records.

Cookies & Tracking Technologies: BigBossJudi uses cookies and similar web tracking technologies to enhance user experience, analyse platform usage patterns, and detect suspicious activity. Further details on cookie usage are set out in Section 6 of this document.

Important Note: BigBossJudi never collects credit card or debit card numbers directly. All payments are processed through certified, secure third-party payment service providers.

3

How We Use Your Personal Data

BigBossJudi uses the personal data collected solely for the following purposes. We will not use your data for any other purpose without obtaining your consent first:

  • Account Management: Creating, managing, and maintaining your BigBossJudi account — including secure login, password recovery, and profile information updates.
  • Transaction Processing: Processes deposits in MYR via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX, and handles withdrawal requests accurately and securely.
  • Identity Verification (KYC): To fulfil Know Your Customer requirements in order to prevent fraud, money laundering, and ensure the platform is only accessed by eligible individuals.
  • Customer Support: To provide technical assistance, resolve complaints, respond to enquiries, and improve the quality of BigBossJudi's support services.
  • Platform Security: Detecting and preventing fraud, unauthorized access, multiple account usage, and any activity that violates BigBossJudi's Terms & Conditions.
  • Personalise Your Experience: Personalising the display of games, promotions, and recommendations based on your activity history and game preferences — whether baccarat, Live Casino, Sports Betting, e-sports, or lottery.
  • Service Communications: Sends important notifications relating to your account, transactions, policy changes, and security updates via SMS to your registered Malaysian mobile number.
  • Legal Compliance: To fulfil applicable legal and regulatory obligations, including retaining transaction records for the periods prescribed by relevant laws.

Marketing Communications: BigBossJudi will only send you marketing and promotional communications if you have given explicit consent during registration or through the communication preferences settings in your account. You may opt out of marketing communications at any time.

4

Disclosure of Data to Third Parties

BigBossJudi maintains a strict policy that member personal data will not be sold, rented, or traded to any third party for commercial purposes. However, there are limited circumstances in which BigBossJudi may need to share your personal data with other parties:

Trusted Service Providers: BigBossJudi works with carefully selected third-party service providers to support platform operations, including:

  • Live casino game providers such as Evolution Gaming and Pragmatic Play Live — only data necessary for game operations is shared.
  • Payment service providers for processing deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX.
  • Cloud service provider for secure data storage — all data is kept in an encrypted environment.
  • Cybersecurity firms for auditing and monitoring the security of BigBossJudi's systems.

All third-party service providers working with BigBossJudi are required to comply with strict data protection standards and are only permitted to use your data for purposes that have been mutually agreed upon.

Legal Requirement: BigBossJudi may disclose your personal data to the relevant authorities where required by Malaysian law, a valid court order, or an official directive from a law enforcement agency. In such cases, BigBossJudi will disclose only the minimum information necessary to comply with the order.

Business Transfer: In the event of a merger, acquisition, or transfer of BigBossJudi's business assets, member personal data may be transferred to the new entity, subject to the requirement that the receiving entity adheres to a privacy policy at least equivalent to BigBossJudi's then-current Privacy Policy.

5

Data Security — How BigBossJudi Protects Your Information

Data security is BigBossJudi's top priority. We continuously invest in security infrastructure and practices to ensure every Malaysian member's personal data is protected to the highest standard at all times.

Technical security measures implemented by BigBossJudi:

  • 256-bit SSL Encryption: All data transmitted between your device and BigBossJudi's servers is encrypted using TLS 1.3 with AES-256 encryption — the same standard used by Malaysia's largest financial institutions.
  • Data-at-Rest Encryption: Sensitive data stored in BigBossJudi's databases, including financial information and identification numbers, is encrypted at rest.
  • Two-Factor Authentication: The BigBossJudi system supports two-factor authentication (2FA) via SMS OTP to your registered Malaysian mobile number to protect your account from unauthorised access.
  • 24/7 Activity Monitoring: BigBossJudi's threat detection system monitors all account activity in real time to identify suspicious login attempts, anomalous transactions, and other indicators of fraud.
  • Environment Segregation: BigBossJudi's production environment is separated from testing and development environments to prevent unintended data exposure.

Organisational security measures in place:

  • Role-based access control (RBAC) — BigBossJudi staff can only access the data required to carry out their specific job responsibilities.
  • All BigBossJudi staff who handle personal data undergo data protection training and are bound by confidentiality agreements.
  • Internal and external security audits are conducted on a regular basis by qualified, independent cybersecurity firms.
  • A comprehensive security incident response procedure is in place to address any data breach that may occur.

Your Responsibilities: While BigBossJudi takes all reasonable steps to protect your data, account security also depends on your own actions. Do not share your password, avoid logging in from shared devices, and contact BigBossJudi support immediately if you suspect your account has been compromised.

6

Use of Cookies & Tracking Technologies

The BigBossJudi platform uses cookies — small text files stored on your device — and similar tracking technologies to improve functionality, security, and user experience on our platform.

Types of cookies BigBossJudi uses:

  • Essential Cookies: Required for core BigBossJudi platform operations, including login session authentication, bet slip management, and transaction security. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
  • Analytics Cookies: Helps BigBossJudi understand how members use the platform — the most frequently visited pages, time spent, and navigation paths. This data is used in aggregated form without identifying any individual, to improve the platform's design and functionality.
  • Functional Cookies: Saves your personal preferences such as interface language (Bahasa Melayu), favourite game selections, and display settings to ensure a more personalised experience each time you log in to your BigBossJudi account.
  • Security Cookies: Helps BigBossJudi detect and prevent unauthorised access attempts, cyber attacks, and fraudulent activity by tracking abnormal usage patterns.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the BigBossJudi platform. For guidance on managing cookies across different browsers, refer to your browser's help documentation.

7

Data Retention Period

BigBossJudi retains member personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law.

  • Active Account Data: For as long as your BigBossJudi account remains active, we retain all relevant profile information and activity history to ensure uninterrupted service.
  • Financial Transaction Records: All deposit and withdrawal records in MYR are retained for a minimum of 7 years from the transaction date, in accordance with Malaysian accounting and anti-money laundering legal requirements.
  • KYC Records: Identity verification documents are retained for a minimum of 5 years after account closure, in accordance with anti-money laundering (AML) compliance requirements.
  • Security Logs: Technical and security logs are retained for 12 months for security investigation and dispute resolution purposes.
  • Support Communication Records: Customer support conversation records are retained for 2 years for quality control purposes and for reference in the event of a dispute.

When personal data is no longer needed and there is no legal requirement to retain it, BigBossJudi will securely delete or destroy that data using methods that ensure it cannot be recovered by any party.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), every individual whose data is processed by BigBossJudi holds the following rights, exercisable at any time:

Right of Access
You have the right to request a copy of all personal data BigBossJudi holds about you. Data access requests will be processed within 21 business days from the date the request is received.
Right to Rectification
If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Basic information can be updated directly through your BigBossJudi account settings.
Right to Erasure
You may request deletion of your personal data upon closure of your BigBossJudi account, subject to the legal retention requirements set out in Section 7. Data that must be retained by law cannot be deleted before the minimum retention period.
Right to Object to Processing
You have the right to object to the use of your personal data for direct marketing purposes at any time. Contact the BigBossJudi support team or update your communication preferences in your account settings to opt out of marketing communications.
Right to Data Portability
You have the right to request a copy of your personal data in a machine-readable format to facilitate transfer to another platform. Such requests will be processed within 30 business days.
Right to Lodge a Complaint with the Authorities
If you believe BigBossJudi has processed your personal data in a manner that violates PDPA 2010, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant authority.

To exercise any of the rights above, please contact the BigBossJudi support team via live chat within the platform or by email at support@bigbossjudi.world. Include sufficient information for us to verify your identity before processing any data-related request.

9

Children's Data Protection

The BigBossJudi platform is an online gambling service intended exclusively for users aged 18 and above. BigBossJudi does not knowingly collect, process, or store any personal data relating to individuals under the age of 18.

Age verification procedures are implemented during the account registration process to prevent access by minors. Should BigBossJudi discover that personal data of an individual under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.

If you become aware that any individual under the age of 18 holds a BigBossJudi account or is accessing our platform, please contact our support team at support@bigbossjudi.world immediately so that appropriate action can be taken.

10

Changes to This Privacy Policy

BigBossJudi reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies we adopt. All revised versions of the Privacy Policy will display a clear update date at the top of the document.

When material changes are made to this Privacy Policy — meaning changes that significantly affect how your personal data is collected, used, or protected — BigBossJudi will notify you via:

  • An in-platform notification on BigBossJudi when you next log in.
  • SMS to the Malaysian phone number registered on your account (for material changes only).
  • A clear notice will be posted on the bigbossjudi.world homepage at least 14 days before any changes take effect.

Your continued use of the BigBossJudi platform after an amended Privacy Policy takes effect will be deemed your acceptance of the changes. The latest version of BigBossJudi's Privacy Policy is always available on this page. You are encouraged to check this page periodically.

11

How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how BigBossJudi handles your personal data, or if you wish to exercise any of the rights set out in Section 8, please contact BigBossJudi's Privacy Officer through the following channels:

  • Email: support@bigbossjudi.world — use the subject line "Data Privacy Enquiry" to ensure your email reaches the right team.
  • Live Chat: Available 24 hours a day, 7 days a week within the BigBossJudi platform — the fastest option for general privacy enquiries.

BigBossJudi is committed to responding to all privacy-related enquiries within 14 business days. For more complex requests such as full data access or record deletion, a realistic processing timeframe will be communicated once the request has been received.

BigBossJudi takes every privacy complaint seriously. Each complaint will be thoroughly investigated and we will provide a clear response outlining the actions taken or to be taken. If you are not satisfied with BigBossJudi's response, you may refer your complaint to Malaysia's Department of Personal Data Protection (JPDP).

Your Rights

BigBossJudi's Data Security Standards

An overview of the protections you receive as a BigBossJudi member — based on industry standards and Malaysian legal requirements.

Protection Level
Data Transmission Encryption SSL 256-bit
Malaysian PDPA Compliance Full
Internal Access Controls Strict RBAC
Security Monitoring 24/7 Automated
Independent Security Audit Periodic
Summary of Your Rights
Right to access your personal data
Right to correct inaccurate data
Right to request data deletion
Right to opt out of marketing communications
Right to a portable copy of your data
Right to lodge a complaint with Malaysia's JPDP

To exercise any of these rights, contact us at support@bigbossjudi.world or via 24/7 Live Chat within the platform.

FAQ

Frequently Asked Questions About BigBossJudi Data Privacy

Answers to the most frequently asked questions by Malaysian members regarding data protection and privacy at BigBossJudi.

No, absolutely not. BigBossJudi has a strict and unambiguous policy that members' personal data will not be sold, rented, or traded to any third party for commercial purposes. Your data is collected solely to provide BigBossJudi's secure, quality services, process transactions in MYR, and comply with applicable Malaysian legal requirements. This is not merely a promise — it is a core operational policy that contractually binds all BigBossJudi staff and partners.

All financial transactions on BigBossJudi — whether deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks — are protected with the same 256-bit SSL encryption used by Malaysia's major banks. BigBossJudi does not store credit card numbers or bank account details directly. All payments are processed through certified, secure third-party payment gateways. Transaction data stored within BigBossJudi's systems is encrypted at rest for an additional layer of protection.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA 2010. Contact the BigBossJudi support team via live chat or email at support@bigbossjudi.world with your request. Please note, however, that certain data is required by Malaysian law to be retained — such as financial transaction records (minimum 7 years) and KYC documents (minimum 5 years after account closure) for anti-money laundering compliance purposes. This data cannot be deleted before the minimum retention period prescribed by law has elapsed.

Your gaming activity data — including your baccarat, Live Casino, Sports Betting (EPL or Malaysia Super League), e-sports, and lottery history — is protected personal information. BigBossJudi does not disclose individual game history to any third party. Third-party game providers operating within the BigBossJudi platform (such as Evolution Gaming) may receive only the minimum technical data required for game operation, and are contractually bound not to use that data for any other purpose. Aggregated activity data (with no personally identifiable information) may be used internally for platform analysis and improvement.

When a BigBossJudi account is closed, data no longer required for operational purposes will be deactivated from active systems. Certain records will, however, be retained for periods prescribed by law: financial transaction records for 7 years, KYC documents for 5 years, and support communication logs for 2 years. These are mandatory Malaysian legal requirements that cannot be waived. Once the minimum retention period has expired, all relevant data will be securely deleted or destroyed using methods that ensure it cannot be recovered.

You may opt out of marketing communications from BigBossJudi at any time in one of two ways: first, through the communication preferences settings in your BigBossJudi account under Notification Settings; or second, by contacting the BigBossJudi support team via live chat or email at support@bigbossjudi.world and stating that you wish to opt out of marketing communications. Requests will be processed within 5 business days. Please note that you will continue to receive important account-related SMS messages such as transaction confirmations, security alerts, and OTPs — these are essential service communications that cannot be disabled, as they are critical to your account security.
View All FAQs

BigBossJudi's Data Protection Commitment

BigBossJudi is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). All communications are protected with 256-bit SSL encryption, your data is never sold to third parties, and you have the full right to access, correct, or request deletion of your personal data at any time. Contact us at support@bigbossjudi.world for any enquiries regarding your data privacy.

Read Full Terms & Conditions
Your Data is Safe with BigBossJudi

Play With Peace of Mind — Your Privacy Is Guaranteed

When you play at BigBossJudi, you don't need to worry about your data security. Bank-grade encryption, Malaysian PDPA compliance, and a strict no-data-sale policy ensure your privacy is fully protected — so you can focus on enjoying baccarat, live casino, or your favourite Sports Betting.

SSL 256-bit Encryption
Compliant PDPA 2010
Welcome Bonus RM100
Register for Free Now Log In
Bahasa Melayu